This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft File: mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft (raw, json) Hash identifier: EU48k24jDNDToS9pK2X1v1E/ET6r1q+Xtr0L3t58xL8= Subject key identifier: DF:50:C9:17:DC:37:E6:CB:4F:DD:1C:C9:91:B3:A5:1C:2E:73:27:94 Authority key identifier: 99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39 Certificate issuer: /CN=9944078b40772b172c7046e7446204980ceae139 Certificate serial: 019AF0BF7FC42D7869F14A0C17C4E58BD49C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft Manifest number: 1736 Signing time: Fri 05 Dec 2025 23:01:13 +0000 Manifest this update: Fri 05 Dec 2025 23:01:13 +0000 Manifest next update: Sat 06 Dec 2025 23:01:13 +0000 Files and hashes: 1: Ku7W6RCmGf1FMZYF6bxZkcHlJ3U.roa (hash: yodxfHzeCCrONRmxjgNBHi9TEwJB+PIep9C2GIrnRgo=) 2: mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl (hash: QJzQSTYqhiCZo2iuPpFC6wJihaontsgwN6+Jv3T5RvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:7f:c4:2d:78:69:f1:4a:0c:17:c4:e5:8b:d4:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9944078b40772b172c7046e7446204980ceae139 Validity Not Before: Dec 5 23:01:13 2025 GMT Not After : Dec 6 23:01:13 2025 GMT Subject: CN=df50c917dc37e6cb4fdd1cc991b3a51c2e732794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6c:65:08:a8:ab:c2:8c:87:94:60:ca:66:17: 18:ed:55:a4:1f:94:dc:06:cf:b5:28:3e:7a:1d:75: 7b:a4:ce:a9:5e:5b:3d:89:fd:6a:2e:19:46:ff:88: 93:74:87:23:e8:46:7b:3c:65:98:77:86:52:e4:35: 60:2c:2e:a3:81:a5:af:4b:1d:a2:0c:e5:41:2a:ad: bd:76:02:7e:5e:bb:8e:15:4e:d1:74:9d:e6:65:c7: c3:af:08:de:d8:19:6a:cf:1f:66:a4:aa:d1:ea:21: 34:e1:97:18:e3:ec:40:78:e2:38:8d:38:91:4a:39: a3:f5:0f:31:79:35:b0:8c:c6:16:ff:bf:eb:98:48: b4:49:93:c6:90:dd:51:a7:c3:1c:bc:10:6c:58:23: 2b:a5:86:38:ba:c8:cd:c4:e4:44:62:99:1c:19:50: c5:fc:38:6f:f7:97:38:c3:bf:52:f3:c8:0b:d9:67: e2:9d:d8:db:e8:c6:d0:9c:6d:6d:14:c4:8a:32:a0: 61:9a:ec:54:88:19:75:e1:56:8b:9b:31:96:8c:de: 0e:13:73:6f:a7:4b:75:cd:73:b3:7c:86:73:30:30: 54:a7:5f:0c:e3:74:7a:78:23:9d:d8:34:01:e2:b0: 22:aa:cc:d0:7a:58:35:af:45:e2:2d:d2:ac:99:08: 58:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:50:C9:17:DC:37:E6:CB:4F:DD:1C:C9:91:B3:A5:1C:2E:73:27:94 X509v3 Authority Key Identifier: keyid:99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:5f:fb:43:0f:0e:a9:e0:4e:27:2a:93:42:64:ad:7a:7f:e0: 23:2e:06:5b:9f:01:ca:d9:37:5b:c3:48:79:f7:cf:86:38:0a: 17:6a:c3:ff:a5:ad:c9:0b:80:25:b9:59:94:e3:bd:d2:c8:49: c1:1e:26:ab:41:4c:ce:95:c1:39:cf:c1:e4:c2:8d:96:32:f2: 72:5c:b5:76:38:91:68:f7:95:55:73:b7:65:31:a4:8d:5a:b1: fe:cb:8a:32:19:9f:3f:4a:63:8d:1e:7a:2d:2c:e7:e6:1b:ba: 02:4b:b9:3a:7d:7f:7d:b0:e0:55:57:38:fa:5b:db:7a:d8:06: d2:5f:55:4e:a2:0e:7e:e3:e8:c0:b5:ee:b0:43:7f:22:9b:bd: b2:37:5f:25:f8:cb:36:02:3e:c1:d4:cb:80:05:a4:f1:95:39: 67:93:33:14:c7:e9:2c:dc:ce:a8:db:ef:45:3f:ed:cf:29:5e: b5:1d:72:6e:19:56:9f:71:e0:4e:d6:f8:f9:3d:94:9f:f1:e0: 89:bc:90:1c:f8:5f:ef:0d:d2:37:7d:9e:07:00:af:a0:ec:64: f6:41:95:33:fd:01:7a:88:f3:09:06:2d:db:e9:c7:b8:08:43: 0d:9d:b8:6b:41:52:22:e4:79:b5:f4:5f:0f:bc:69:47:50:2b: 9a:3b:0f:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3/ELXhp8UoMF8Tli9ScMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NDQwNzhiNDA3NzJiMTcyYzcwNDZlNzQ0NjIwNDk4MGNl YWUxMzkwHhcNMjUxMjA1MjMwMTEzWhcNMjUxMjA2MjMwMTEzWjAzMTEwLwYDVQQD EyhkZjUwYzkxN2RjMzdlNmNiNGZkZDFjYzk5MWIzYTUxYzJlNzMyNzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWxlCKirwoyHlGDKZhcY7VWkH5Tc Bs+1KD56HXV7pM6pXls9if1qLhlG/4iTdIcj6EZ7PGWYd4ZS5DVgLC6jgaWvSx2i DOVBKq29dgJ+XruOFU7RdJ3mZcfDrwje2Blqzx9mpKrR6iE04ZcY4+xAeOI4jTiR Sjmj9Q8xeTWwjMYW/7/rmEi0SZPGkN1Rp8McvBBsWCMrpYY4usjNxOREYpkcGVDF /Dhv95c4w79S88gL2Wfindjb6MbQnG1tFMSKMqBhmuxUiBl14VaLmzGWjN4OE3Nv p0t1zXOzfIZzMDBUp18M43R6eCOd2DQB4rAiqszQelg1r0XiLdKsmQhYTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9QyRfcN+bLT90cyZGzpRwucyeUMB8GA1UdIwQY MBaAFJlEB4tAdysXLHBG50RiBJgM6uE5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVVRSGkwQjNLeGNzY0ViblJHSUVtQXpxNFRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wNDhkZjYtYmNjZC00ODg1LThmNDMt NGRjMjA3MWE1YmYxLzEvbVVRSGkwQjNLeGNzY0ViblJHSUVtQXpxNFRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8wNDhkZjYtYmNjZC00ODg1LThmNDMtNGRjMjA3MWE1YmYx LzEvbVVRSGkwQjNLeGNzY0ViblJHSUVtQXpxNFRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKl/7Qw8O qeBOJyqTQmSten/gIy4GW58Bytk3W8NIeffPhjgKF2rD/6WtyQuAJblZlOO90shJ wR4mq0FMzpXBOc/B5MKNljLycly1djiRaPeVVXO3ZTGkjVqx/suKMhmfP0pjjR56 LSzn5hu6Aku5On1/fbDgVVc4+lvbetgG0l9VTqIOfuPowLXusEN/Ipu9sjdfJfjL NgI+wdTLgAWk8ZU5Z5MzFMfpLNzOqNvvRT/tzyletR1ybhlWn3HgTtb4+T2Un/Hg ibyQHPhf7w3SN32eBwCvoOxk9kGVM/0BeojzCQYt2+nHuAhDDZ24a0FSIuR5tfRf D7xpR1ArmjsP6g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:21 2025 by rpki-client